Kernel Panic

2004-12-28 Thread Steven Adams
Hi,

 

I started with FreeBSD 5.2.1, every few weeks I was getting kernel panics.

 

I then tired to update to 5.3 with the same thing, see the screen shots.

 

http://66.90.65.210/crash1.jpg

http://66.90.65.210/crash2.jpg

 

Does anyone know what theses means. I am curious to why its not rebooting
after a kernel panic, I was under the impression that's what's suppose to
happen.

 

Any help would be greatly appreciated. 

 

 

SYSTEM: Acer Altos 510


Dual Xeon 2.4 (w/ HT)

1GIG ECC RAM

Mega raid scsi

 

 

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Kernel Panic

2004-12-28 Thread Steven Adams
Its hard for me to disable HT as the server can get under high load
sometimes.. 

Ive ran a memtest86 on it with no errors..

Any way to make the kernel auto reboot on panic?

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644
-Original Message-
From: Subhro [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 28 December 2004 8:37 PM
To: [EMAIL PROTECTED]; freebsd-questions@FreeBSD.ORG
Subject: RE: Kernel Panic




 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-freebsd-
 [EMAIL PROTECTED] On Behalf Of Steven Adams
 Sent: Tuesday, December 28, 2004 13:58
 To: freebsd-questions@FreeBSD.ORG
 Subject: Kernel Panic
 
 Hi,
 
 
 
 I started with FreeBSD 5.2.1, every few weeks I was getting kernel panics.
 
 
 
 I then tired to update to 5.3 with the same thing, see the screen shots.
 
 
 
 http://66.90.65.210/crash1.jpg
 
 http://66.90.65.210/crash2.jpg
 
 
 
 Does anyone know what theses means. I am curious to why its not rebooting
 after a kernel panic, I was under the impression that's what's suppose to
 happen.
 
 
 
 Any help would be greatly appreciated.
 
 
 
 
 
 SYSTEM: Acer Altos 510
 
 
 Dual Xeon 2.4 (w/ HT)
 
 1GIG ECC RAM
 
 Mega raid scsi
 

Try disabling HT and see if that helps. Also your RAM modules may be bad.

Regards,
S.

Indian Institute of Information Technology
Subhro Sankha Kar
Block AQ-13/1, Sector V
Salt Lake City
PIN 700091
India

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Kernel Panic

2004-12-28 Thread Steven Adams
Please note I posted 2 kernel panics, one with bge and one with ducpumon.

I will put them into my kernel and see if it reboots, ill also try get it to
dump the panic so I can have a look at it at least.

Its hard for me to test it as its only crashing every 30+ days or so, so you
might not hear from me for a while.

Thanks for your help.

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

-Original Message-
From: sp0ng3b0b [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 29 December 2004 4:52 AM
To: [EMAIL PROTECTED]
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Kernel Panic

Steven Adams wrote:

 I started with FreeBSD 5.2.1, every few weeks I was getting kernel panics.
 I then tired to update to 5.3 with the same thing, see the screen shots.
 http://66.90.65.210/crash1.jpg
 http://66.90.65.210/crash2.jpg
 Does anyone know what theses means. I am curious to why its not rebooting
 after a kernel panic, I was under the impression that's what's suppose to
 happen.

1. You must compile some options into your kernel that will make it 
reboot if it panics.

options KDB
options KDB_UNATTENDED


2. Look at the current process in your panic message. It reads bge0. 
That is you NIC, right? Something in FreeBSD 5.3 changed and I get 
similar panics but with nge0 (my NIC) as the current process. I did not 
get these in 5.2.1 or any other version. It looks like the problem is 
either some global change made to NIC drivers or the kernel itself. I've 
never had kernel panics on my hardware.

I too posted to the list, but I have not recieved a response. I don't 
think I got it to the right people. I also opened a problem report on 
the freebsd website, but no one has touched it.

For now, I have to go back to 4.10.


Hope that helps.

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


SSHD Broken After Update

2004-11-07 Thread Steven Adams
Hi,

I updated my server to 5.3 from 5.2.1 yesterday.

I did encounter a few problem but managed to get by them by editing a few
make files etc..

All is working except sshd.

When I login it get this error in my logs

reverse mapping checking getaddrinfo for IP failed - possible breakin
attempt!

Does anyone know what this means? Ive looked everywhere on google.com
without any luck :(

Thanks guys

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Big Problem, Load Avg Very High

2004-11-06 Thread Steven Adams
This is a live server. I cant format it or take it down for over 5-6hours...

In theory you should be able to update to 5.3 from 5.2.1 correct?

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

-Original Message-
From: DanGer [mailto:[EMAIL PROTECTED] 
Sent: Saturday, 6 November 2004 9:25 PM
To: [EMAIL PROTECTED]; Steven Adams
Subject: Re: Big Problem, Load Avg Very High

Saturday, November 6, 2004, 6:41:50 AM, you wrote:

 Hi,

  hello

 I run FreeBSD 5.2.1 with the following hardware

  you can upgrade to 5.3, it's now -release

 I am really confussed what else I can do to find out what is causing this
 problem as the server completely locks up when it goes to 50+ load.

 It seems that its copying a lot of information to the swap drive and is
 running out of ram, which I don't know why it seems apache is taking up
all
 of the ram for some weird reason?

  don't you use apache 2.x ? if so, there is a new DDoS feature :)

  info:

  http://www.securiteam.com/unixfocus/6A0010KBPE.html

 Here is my demsg, I hope you guys can help!


-- 
Good luck

+--==/\/\==--+   (__)  FreeBSD
| DanGer [EMAIL PROTECTED] |\\\'',)  The
| [EMAIL PROTECTED] ICQ261701668 |  \/  \ ^Power
| http://danger.homeunix.org |  .\._/_)To
+--==\/\/==--+ Serve

[ Uz sa zase tvaris prilis vazne. ]



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Cpanel on FreeBSD 5.2 howto

2004-11-06 Thread Steven Adams
I run it fine..

I am updateing ti 5.3 atm with cpanel..

What seems to be the problem.. There is a few bugs with cpanel and freebsd
only minor ones tho.. Which I have told cpanel about and they are fixing.

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

-Original Message-
From: Hadi Maleki-Baroogh [mailto:[EMAIL PROTECTED] 
Sent: Saturday, 6 November 2004 6:48 PM
To: [EMAIL PROTECTED]
Subject: Cpanel on FreeBSD 5.2 howto

anyone know any good howtos on getting Cpanel going on FreeBSD 5.2?

_
Take advantage of powerful junk e-mail filters built on patented MicrosoftR 
SmartScreen Technology. 
http://join.msn.com/?pgmarket=en-capage=byoa/premxAPID=1994DI=1034SU=htt
p://hotmail.com/encaHL=Market_MSNIS_Taglines 
  Start enjoying all the benefits of MSNR Premium right now and get the 
first two months FREE*.

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Kernel Panic!

2004-11-05 Thread Steven Adams
Hi, 

 

At random I will get this kernel panic



 

Does anyone have any idea what this means ??

 

Also how do I make the kernel auto reboot the system when there is a kernel
panic..

 

Thanks for the help!

 

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Kernel Panic!

2004-11-05 Thread Steven Adams
Sorry it was changed to text only..

The error is as follows (or go to http://drifthost.com/intertia-error.jpg)
===
Kernel trap 12 with interrupts disabled

Fatal trap 12: page fault while in kernel mode
Cupid= = 0; apic id = 00
Fault virtual address = 0x24
Fault code = supervisor read, page not present
Instruction pointer = 0x8 :0c04d954e
Stack pointer = 0x10 :0xe0083c64
Frame pointer = 0x10:0xe0083c88
Code segment = base 0x0, limit 0x, type 0x1b
= DPL 0, pres 1, def32 1, gran 1
Processor eflags = resume, IOPL = 0
Current process = 29 (irq16: bge0)
Trap number = 12
Panic: page fault
Cupid = 0;
Boot() called on cpu#0

Syncing disks, buggers remaining panic: pmap_invalidate_range:
interrupts disabled
Cupid = 0;
Boot() called on cpu#0
Uptime: 14d23h0m11s
=


It seems it's a program with the bge (network card)

Curious how I make it reboot on error and how I would debug this/fix it.

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644
-Original Message-
From: Steven Adams [mailto:[EMAIL PROTECTED] 
Sent: Friday, 5 November 2004 7:18 PM
To: [EMAIL PROTECTED]
Subject: Kernel Panic!

Hi, 

 

At random I will get this kernel panic



 

Does anyone have any idea what this means ??

 

Also how do I make the kernel auto reboot the system when there is a kernel
panic..

 

Thanks for the help!

 

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

 



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Kernel Panic!

2004-11-05 Thread Steven Adams
Im not quite sure what you mean by that..

Is that an env variable, make file or shell variable.. ?

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

-Original Message-
From: Subhro [mailto:[EMAIL PROTECTED] 
Sent: Saturday, 6 November 2004 12:55 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Kernel Panic!

Quote:
The error is as follows (or go to http://drifthost.com/intertia-error.jpg)
===
Kernel trap 12 with interrupts disabled

Fatal trap 12: page fault while in kernel mode
Cupid= = 0; apic id = 00
Fault virtual address = 0x24
Fault code = supervisor read, page not present
Instruction pointer = 0x8 :0c04d954e
Stack pointer = 0x10 :0xe0083c64
Frame pointer = 0x10:0xe0083c88
Code segment = base 0x0, limit 0x, type 0x1b
   = DPL 0, pres 1, def32 1, gran 1
Processor eflags = resume, IOPL = 0
Current process = 29 (irq16: bge0)
Trap number = 12
Panic: page fault
Cupid = 0;
Boot() called on cpu#0

Syncing disks, buggers remaining panic: pmap_invalidate_range:
interrupts disabled
Cupid = 0;
Boot() called on cpu#0
Uptime: 14d23h0m11s
=

Any non standard CXFLAGS?

Regards
S.

-- 
Subhro Sankha Kar
School of Information Technology
Block AQ-13/1 Sector V
ZIP 700091
India
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Big Problem, Load Avg Very High

2004-11-05 Thread Steven Adams
] at ata1-master UDMA100

amrd0: LSILogic MegaRAID logical drive on amr0

amrd0: 140008MB (286736384 sectors) RAID 5 (optimal)

GEOM: create disk amrd0 dp=0xc66e030c

ses0 at amr0 bus 0 target 6 lun 0

ses0: SDR GEM318P 1 Fixed Processor SCSI-2 device 

ses0: SAF-TE Compliant Device

SMP: AP CPU #1 Launched!

SMP: AP CPU #3 Launched!

SMP: AP CPU #2 Launched!

===

 

 

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Big Problem, Load Avg Very High

2004-11-05 Thread Steven Adams
  1.2 18024 12980  ??  S 5:07PM   0:01.82
/usr/local/apache/bin/httpd -DSSL
nobody   60847  0.0  1.2 18092 13040  ??  I 5:07PM   0:01.82
/usr/local/apache/bin/httpd -DSSL
nobody   60848  0.0  1.2 17984 12932  ??  I 5:07PM   0:02.43
/usr/local/apache/bin/httpd -DSSL
nobody   60849  0.0  1.4 19596 14584  ??  I 5:07PM   0:03.44
/usr/local/apache/bin/httpd -DSSL
nobody   60865  0.7  1.2 18024 12984  ??  S 5:07PM   0:03.29
/usr/local/apache/bin/httpd -DSSL
nobody   60866  0.0  1.2 18008 12992  ??  S 5:07PM   0:04.36
/usr/local/apache/bin/httpd -DSSL
nobody   60868  0.6  1.2 18004 12968  ??  S 5:07PM   0:04.17
/usr/local/apache/bin/httpd -DSSL
nobody   60869  0.7  1.3 18456 13444  ??  S 5:07PM   0:04.17
/usr/local/apache/bin/httpd -DSSL
nobody   60871  0.0  1.2 18020 12976  ??  I 5:07PM   0:02.60
/usr/local/apache/bin/httpd -DSSL
nobody   61115  0.4  1.2 17976 12932  ??  S 5:09PM   0:01.48
/usr/local/apache/bin/httpd -DSSL
nobody   61518  0.1  1.2 17512 12500  ??  S 5:12PM   0:00.72
/usr/local/apache/bin/httpd -DSSL
nobody   61957  0.0  1.2 18036 12980  ??  S 5:15PM   0:01.20
/usr/local/apache/bin/httpd -DSSL
nobody   61975  0.5  1.2 17652 12636  ??  S 5:15PM   0:01.56
/usr/local/apache/bin/httpd -DSSL
nobody   61976  0.0  1.2 17812 12800  ??  S 5:15PM   0:01.19
/usr/local/apache/bin/httpd -DSSL
nobody   62128  0.0  0.8 13516 8184  ??  I 5:17PM   0:00.01
/usr/local/apache/bin/httpd -DSSL
nobody   62350  0.2  1.4 19260 14208  ??  S 5:17PM   0:01.90
/usr/local/apache/bin/httpd -DSSL
nobody   62461  0.8  1.2 17916 12800  ??  S 5:18PM   0:00.66
/usr/local/apache/bin/httpd -DSSL
root 0  0.0  0.0 00  ??  ZW   - 0:00.00  (pstat)
root 62655  0.0  0.1  1432  808  p1  R+5:20PM   0:00.00 ps auxf
root 0  0.0  0.0 04  ??  DLs  Fri01PM   0:01.83  (swapper)
root10  0.0  0.0 0   12  ??  DL   Fri01PM   0:00.00  (ktrace)
root 1  0.0  0.0   760   84  ??  ILs  Fri01PM   0:00.86 /sbin/init
--
root15  0.0  0.0 0   12  ??  WL   Fri01PM   0:00.06  (irq1:
atkbd0)
root19  0.0  0.0 0   12  ??  WL   Fri01PM   0:00.00  (irq6:
fdc0)
root28  0.0  0.0 0   12  ??  WL   Fri01PM   0:01.70  (irq15:
ata1)


Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

-Original Message-
From: Dan Nelson [mailto:[EMAIL PROTECTED] 
Sent: Saturday, 6 November 2004 5:08 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Big Problem, Load Avg Very High

In the last episode (Nov 06), Steven Adams said:
 We host a couple or sites on this server (not very big sites). My
 server load is always around 0.90 - 3.40. Sometimes it will jump up
 to 10-15.
 
 At random it will jump up to 30-40 load and I wont even be able to
 get to the server, typing commands on the remote ip based kvm is VERY
 slow sometimes missing letters. As soon as im able to get top running
 it shows
 
 
 
 last pid: 52614;  load averages:  6.82, 15.75, 15.18 up 1+03:07:12
16:32:22
 
 462 processes: 1 running, 460 sleeping, 1 zombie
 CPU states:  0.0% user,  0.0% nice,  0.6% system,  0.6% interrupt, 98.7%
idle
 
 Mem: 615M Active, 68M Inact, 288M Wired, 29M Cache, 112M Buf, 1844K Free
 Swap: 1536M Total, 555M Used, 981M Free, 36% Inuse, 12K In

500MB of swap used?  You might have a process that's allocating too
much memory and causing the rest of the processes to swap to disk. Try
keeping a top session running all the time so you can monitor swap
usage and see if you notice any processes taking more memory than they
should.
 
 I did notice once when running systat -vmstat the amr0(scsi raid) jumps up
 to 99% busy copying 2-3MB/s for a few moments then goes back down..

That could be either regular disk activity or swap thrashing.  vmstat
1 will tell you (watch the fre, pi and po columns).
 
 After one of the times it went to 50load it got this on the console
 screen. FYI: amrd0s1h is /home partition
 
 Swap_pager: indefinite wait buffer: device: amrd0s1h, blkno: 103776, size:
32768
 Swap_pager: indefinite wait buffer: device: amrd0s1h, blkno: 130801, size:
4096

Most likely you're thrashing.  I've seen a couple other people mention
this error with 5.2.1, but not lately, so chances are 5.3 has fixed
this particular problem.

 It seems that its copying a lot of information to the swap drive and
 is running out of ram, which I don't know why it seems apache is
 taking up all of the ram for some weird reason?

Not weird at all.  If you are using perl or php modules, they can
really suck up ram if you get a lot of page hits at once.  You might
want to look at using fastcgi to separate perl/php from the apache
process itself.

-- 
Dan Nelson
[EMAIL PROTECTED]
___
[EMAIL PROTECTED

RE: IPFW Problem

2004-10-01 Thread Steven Adams
I don't have an internal network.

This is a server with 1 gigabit network card on a gig link.

Im really confussed on whats happing then, because web browsing still works
but its blocking come packets..

I host 60sites+ so I cant pin it down to one site or nothing.

Anyone have any other ideas?

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

-Original Message-
From: Subhro [mailto:[EMAIL PROTECTED] 
Sent: Friday, 1 October 2004 12:36 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: IPFW Problem

On Thu, 30 Sep 2004 22:32:16 +1000, Steven Adams [EMAIL PROTECTED]
wrote:
 When I add
 
 $fwcmd add allow ip from any to any established
 
 The messages go away, but when I remove it they come back, I ran a tcpdump
 it seems most of the packet just have ACK set?

If this works for you then the keep-state is definitely not working
for you. Because when a SYN comes in, the state is saved in the
firewall dynamic states so that subsequent ACKs corresponding to that
SYN gets through without any problem.

snip

===
 oif=bge0
 fwcmd=ipfw
 
 $fwcmd -f flush
 
 $fwcmd add check-state
 
 $fwcmd add allow ip from any to any via lo0
 $fwcmd add deny ip from any to 127.0.0.0/8
 
 $fwcmd add deny all from any to any frag in via $oif
 
 $fwcmd add allow tcp from any to me

21,25,26,53,110,143,443,465,953,993,995,2082,2083,2086,2087,2089,2095,2096,2
 627,,4-49452
 in via $oif keep-state setup
 $fwcmd add allow tcp from any to me 80 setup keep-state
 $fwcmd add allow udp from me 53 to any keep-state
 $fwcmd add allow udp from any to any 53 keep-state
 
 $fwcmd add allow all from me to any out via $oif setup keep-state
 
 $fwcmd add deny all from any to any 137,138,139,67,68 in
 
 $fwcmd add deny log all from me to any 22
 $fwcmd add deny log all from any to any

change this to $fwcmd add deny log all from any to any in xmit $oif
BTW, any good reason not to trust your internal network from sending
data through the firewall?

snip

Regards
S.

-- 
Subhro Sankha Kar
School of Information Technology
Block AQ-13/1 Sector V
ZIP 700091
India
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: IPFW Problem

2004-09-30 Thread Steven Adams
When I add

$fwcmd add allow ip from any to any established

The messages go away, but when I remove it they come back, I ran a tcpdump
it seems most of the packet just have ACK set?

Im not to sure whats going on?

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 30 September 2004 4:33 PM
To: [EMAIL PROTECTED]
Subject: IPFW Problem

Hi,

I am tryin to setup my Firewall on my server, so far i have the following.

===
oif=bge0
fwcmd=ipfw

$fwcmd -f flush

$fwcmd add check-state

$fwcmd add allow ip from any to any via lo0
$fwcmd add deny ip from any to 127.0.0.0/8

$fwcmd add deny all from any to any frag in via $oif

$fwcmd add allow tcp from any to me
21,25,26,53,110,143,443,465,953,993,995,2082,2083,2086,2087,2089,2095,2096,2
627,,4-49452
in via $oif keep-state setup
$fwcmd add allow tcp from any to me 80 setup keep-state
$fwcmd add allow udp from me 53 to any keep-state
$fwcmd add allow udp from any to any 53 keep-state

$fwcmd add allow all from me to any out via $oif setup keep-state

$fwcmd add deny all from any to any 137,138,139,67,68 in

$fwcmd add deny log all from me to any 22
$fwcmd add deny log all from any to any
==

When i turn the firewall on i am getting this in my /var/log/security


Sep 30 16:30:48 inertia kernel: ipfw: 1200 Deny TCP SOMECLIENT:2858
MYIP:80 in via bge0
Sep 30 16:30:48 inertia kernel: ipfw: 1200 Deny TCP SOMECLIENT:2864
MYIP:80 in via bge0
Sep 30 16:30:48 inertia kernel: ipfw: 1200 Deny TCP SOMECLIENT:2858
MYIP:80 in via bge0
Sep 30 16:30:48 inertia kernel: ipfw: 1200 Deny TCP MYIP:80
SOMECLIENT:1431 out via bge0
Sep 30 16:30:49 inertia kernel: ipfw: 1200 Deny TCP MYIP:80
SOMECLIENT:2694 out via bge0
Sep 30 16:30:49 inertia kernel: ipfw: 1200 Deny TCP MYIP:80
SOMECLIENT:3059 out via bge0
Sep 30 16:30:49 inertia kernel: ipfw: 1200 Deny TCP MYIP:80
SOMECLIENT:33077 out via bge0
Sep 30 16:30:49 inertia kernel: ipfw: 1200 Deny TCP MYIP:80
SOMECLIENT:33130 out via bge0
==

I am unsure to why i am getting theses, its like the check-state command
is half working..

I can still browse my web server fine but im still getting theses messages.

Anyone got any ideas?

Thanks
Steve


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


/libexec/ld-elf.so.1: Shared object libssl.so.3 not found

2004-09-16 Thread Steven Adams
Hi..

When im trying to run pkg_add im getting


Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: /libexec/ld-elf.so.1: Shared object libssl.so.3 not found

2004-09-16 Thread Steven Adams

Hi..

When im trying to run pkg_add im getting

/libexec/ld-elf.so.1: Shared object libssl.so.3 not found

Does anyone know what this mean and how I install it.

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: /libexec/ld-elf.so.1: Shared object libssl.so.3 not found

2004-09-16 Thread Steven Adams
Thanks for your reply.

Ive managed to fix it by copying libssl.so.3 from another freebsd server I
am running, to my surprise it works fine now.

Dunno how it went missing, think it was something cpanel done.

Thanks tho!

Steven Adams [EMAIL PROTECTED] 
DriftNet Web Services http://www.drifthost.com 
Home: +61 2 94274857
Fax: +61 2 94274857
Mobile +61 (0) 404 085644

-Original Message-
From: Matthew Seaman [mailto:[EMAIL PROTECTED] 
Sent: Thursday, 16 September 2004 11:29 PM
To: Steven Adams
Cc: 'FreeBSD Questions'
Subject: Re: /libexec/ld-elf.so.1: Shared object libssl.so.3 not found

On Thu, Sep 16, 2004 at 08:49:29PM +1000, Steven Adams wrote:

 When im trying to run pkg_add im getting
 
 /libexec/ld-elf.so.1: Shared object libssl.so.3 not found
 
 Does anyone know what this mean and how I install it.

Well, the error message means that the dynamic loader (ld-elf.so)
cannot find a shared library that pkg_add requires.  The library
itself should be in:

/usr/lib/libssl.so.3

Both that, and pkg_add are standard parts of the base system, although
there are also versions of OpenSSL (security/openssl) and the pkg
tools suite (sysutils/pkg_install) in the ports system.  I'm guessing
that what has happened is that you've installed one or both of those
using pre-compiled packages, hence the trouble resolving the shared
libraries.

In general, you shouldn't install a port that duplicates part of the
base system unless you actually need to do that.  Especially if what
you're installing provides shared libraries.  Most of those ports
exist as ways of ensuring backwards compatability to older system
versions -- you certainly don't need them if you're running
4.10-RELEASE, 4.10-STABLE, 5.2.1-RELEASE or better.  There's probably
a couple of other releases from the 4.x series where you don't need
them either.

If you haven't got a /usr/lib/libssl.so.3 file on your computer, then
something is certainly rotten there.  The simplest way to recover is
to use cvsup to grab the latest sources from whatever installation
branch you're using, and then do a full build+install world+kernel
cycle as detailed in the Handbook:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvsup.html
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html

Do examine your /etc/make.conf to make sure you aren't inadvertently
disabling crypto support.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Monitor Disk Usage (Unusual Load Avgs)

2004-08-13 Thread Steven Adams
Hi,

Server specs

Dual p4 xeon 2.4 (4virtual cpus)
1gig ecc ram
5x 36gig 10k rpm scsi on a ami megaraid

I only host a few web sites on this server which at the most peak hour of
times there is only about 6-7%cpu usage. For some reason my load avg's will
jump from 0.05 to 0.98 even to 1.50 when the cpu is only using 3%.

I am thinking something is using the hard drive as I have load avg peaks of
6.0-7.0.

I want to find out what is causing this as im curious to why they get so
high. 

Does anyone know how to find out what running processes are using the
harddrive or something like that??

Also how do I check if DMA mode is enabled, I know there is a hdparm in
linux but I cant find anything like that for freebsd..

Thanks for you help
Steve


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Bwbar for Freebsd

2004-08-13 Thread Steven Adams
Hi,

Does anyone know where I can get a bwbar tool for freebsd..

Ive looked high and low on google.com etc and cant really find anything..


Example of what bwbar does
http://66.90.65.210/bandwidth/

I don't want to use mrtg or rrdtool because they don't show u real time
stats like bwbar does.

thanks
Steve


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: FreeBSD Kernel Recompile, Does not exclude modules

2004-07-12 Thread Steven Adams
Hey..

Hehe yes I rebooted the server..

It was weird because now its not there anymore..

I had to add it to /etc/rc.conf

But in /etc/default/rc.conf its default is NO..


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of epilogue
Sent: Monday, 12 July 2004 2:27 PM
Cc: [EMAIL PROTECTED]
Subject: Re: FreeBSD Kernel Recompile, Does not exclude modules

On Mon, 12 Jul 2004 09:00:00 +1000
Steven Adams [EMAIL PROTECTED] wrote:

 I already made a custom kernel and disabled usb in /etc/rc.conf
 
 I guess they aren't causing me any harm ill just leave them alone for
 now..:)
 
 Thanks tho

hello steven,

this will probably sound silly, and if you think so too, i'll take your
silence as 'yes, silly bunny.'

1) have you rebooted since the changes to rc.conf?

2) does your rc.conf entry include the   marks?
  usbd_enable=NO

3) does a 'usbd_enable' line appear 'more than once' in your rc.conf? 
several rc.conf entries are generated by the installation.  perhaps you've
got two.  you may have created your NO entry at the top of the
file and have a YES entry a few lines down.

anyhoo.  hope that this gives you something to double check.


cheers,
epi

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Matthew Seaman
 Sent: Sunday, 11 July 2004 11:50 PM
 To: Steven Adams
 Cc: 'Arjan Van Leeuwen'; [EMAIL PROTECTED]
 Subject: Re: FreeBSD Kernel Recompile, Does not exclude modules
 
 On Sun, Jul 11, 2004 at 10:09:54PM +1000, Steven Adams wrote:
 
  Ive already disabled usbd_enable=no in /etc/rc.conf
  
  But still I get theses
  
  root   399  0.0  0.0 0   12  ??  DL   Sat04PM   0:00.03  (usb0)
  root   400  0.0  0.0 0   12  ??  DL   Sat04PM   0:00.00  (usbtask)
  
  And yes I ran make install, I know it worked because I also compiled in
  quota support which is now working and wasn't previously.
  
  I am a 5year slackware linux user just moved over to FreeBSD so im used
  to the linux kernel, that's why its confused me a little. FreeBSD is
  looking great tho.. :)
  
  But yeh wondering how I get rid of them 2 processes.
 
 Those are not ordinary processes.  Rather they are kernel threads (or
 some such description) -- along the same lines as the vmdaemon,
 swapper or syncer threads.
 
 In order to get rid of them, you'ld have to compile a custom kernel
 with all of the usb support ripped out *and* you'ld have to take steps
 to prevent the kernel autoloading a usb.ko kernel module on boot up.
 
 If you have inadvertently loaded a usb kld module -- use kldstat(8) to
 see if that is the case -- then you should be able to unload it with
 kldunload(8), so long as it's not actually busy doing stuff.
 
 On the whole though, I wouldn't bother too much about those usb kernel
 thread things.  They're generally harmless and they don't have any
 impact on the rest of the system if there are no USB peripherals in
 use.
 
   Cheers,
 
   Matthew
 
 -- 
 Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
   Savill Way
 PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
 Tel: +44 1628 476614  Bucks., SL7 1TH UK
 
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to
 [EMAIL PROTECTED]
 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


LSI MegaRaid Monitor, Hdparm for freebsd?

2004-07-12 Thread Steven Adams
Hey FreeBSD,

 

Does anyone know if there is a hdparm for freebsd? I cant find anything on
google.com or freebsd.org about it.

 

Does anyone know if there is a freebsd megamon drivers for the lsi megaraid
cards as well, google.com showed one but it dosent work on my system (
program was made 2002 )

 

Reason I want hdparm is to make sure my scsi is using dma etc as its
performing a bit slow..

 

Thanks

steve

 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: HDD Sizes reported wrong?

2004-07-11 Thread Steven Adams
Thanks Dan

I was looking through the handbook and just found it as I got the email :)..

Think ill leave it as 8% as speed is important to this server.

/Steve

-Original Message-
From: Dan Nelson [mailto:[EMAIL PROTECTED] 
Sent: Sunday, 11 July 2004 3:49 PM
To: Steven Adams
Cc: [EMAIL PROTECTED]
Subject: Re: HDD Sizes reported wrong?

In the last episode (Jul 11), Steven Adams said:
 I have a LSI MegaRaid Raid card with 5x 36gig raid 5 scsi drives..
 
 Now my /home is getting reported at 108gig(which is right) But for
 some reason its saying 97gig free and 2.4 gig used..
 
 Im confussed where the other 8.5gig or so is gone??
 
 /dev/amrd0s1h   108G   2.4G97G 2%/home

First, I recommend not using the -h option when trying to total things
up.  You lose lots of precision.  Second, the df values don't total up
because 8% is reserved on ffs filesystems so the disk allocation
algorithms stay efficient.  You can lower it with tunefs but as the
disk gets closer to 100%, performance rapidly degrades and files will
get fragmented.  Root can use that 8% which gives you the added benefit
that if a user fills up a drive it doesn't keep root processes from
working. 

http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/disks.html#DISK-MORE-TH
AN-FULL

-- 
Dan Nelson
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


FreeBSD Kernel Recompile, Does not exclude modules

2004-07-11 Thread Steven Adams
Hey,

 

Reading from the FreeBSD Handbook I have compiled a new kernel that works
fine.

 

In my config file I commented out a few things I don't need eg USB etc.

 

But for some reason when it booted back up into the new kernel, from ps aux
it shows usb is up and running..

 

/boot/kernel shows that usb.ko is there.

 

I don't understand why its included which I commented it out

 

Am I doing something wrong?

 

Thanks

Steve

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: FreeBSD Kernel Recompile, Does not exclude modules

2004-07-11 Thread Steven Adams
Hi, 

Ive already disabled usbd_enable=no in /etc/rc.conf

But still I get theses

root   399  0.0  0.0 0   12  ??  DL   Sat04PM   0:00.03  (usb0)
root   400  0.0  0.0 0   12  ??  DL   Sat04PM   0:00.00  (usbtask)

And yes I ran make install, I know it worked because I also compiled in
quota support which is now working and wasn't previously.

I am a 5year slackware linux user just moved over to FreeBSD so im used to
the linux kernel, that's why its confused me a little. FreeBSD is looking
great tho.. :)

But yeh wondering how I get rid of them 2 processes.

Thanks
Steve

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Arjan Van Leeuwen
Sent: Sunday, 11 July 2004 9:14 PM
To: Steven Adams
Cc: [EMAIL PROTECTED]
Subject: Re: FreeBSD Kernel Recompile, Does not exclude modules

Hi Steve,

On Sun, 11 Jul 2004 17:25:40 +1000, Steven Adams [EMAIL PROTECTED]
wrote:
 Hey,
 
 Reading from the FreeBSD Handbook I have compiled a new kernel that works
 fine.
 
 In my config file I commented out a few things I don't need eg USB etc.
 
 But for some reason when it booted back up into the new kernel, from ps
aux
 it shows usb is up and running..

You mean that the program usbd is running. This is a userland program
that detects new USB devices and starts some predefined sequence of
commands when a certain device enters the system. You can turn it off
by adding usbd_enable=NO to /etc/rc.conf.

 
 /boot/kernel shows that usb.ko is there.
 
 I don't understand why its included which I commented it out

There's a difference between 'compiling something into the kernel' and
using a kernel module. usb.ko is a kernel loadable module - a module
that you can load with kldload if you need it. It's not compiled into
the kernel. When you had 'device usb' in your kernel, usb would be
compiled into the kernel and you'd never need to load the kernel
loadable module for it. Now, you've removed usb from your kernel
configuration file, so usb support is not in your kernel. Should you
need it later, you can always load the module.

If the module is not loaded, it doesn't take up any resources (except
for the hard drive space it uses), so it shouldn't bother you.

If you really don't want to compile any modules at all when building
your kernel (for example, to save time when building a kernel), add
NO_MODULES=true to /etc/make.conf.

Arjan
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: FreeBSD Kernel Recompile, Does not exclude modules

2004-07-11 Thread Steven Adams
I already made a custom kernel and disabled usb in /etc/rc.conf

I guess they aren't causing me any harm ill just leave them alone for now..
:)

Thanks tho

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matthew Seaman
Sent: Sunday, 11 July 2004 11:50 PM
To: Steven Adams
Cc: 'Arjan Van Leeuwen'; [EMAIL PROTECTED]
Subject: Re: FreeBSD Kernel Recompile, Does not exclude modules

On Sun, Jul 11, 2004 at 10:09:54PM +1000, Steven Adams wrote:

 Ive already disabled usbd_enable=no in /etc/rc.conf
 
 But still I get theses
 
 root   399  0.0  0.0 0   12  ??  DL   Sat04PM   0:00.03  (usb0)
 root   400  0.0  0.0 0   12  ??  DL   Sat04PM   0:00.00  (usbtask)
 
 And yes I ran make install, I know it worked because I also compiled in
 quota support which is now working and wasn't previously.
 
 I am a 5year slackware linux user just moved over to FreeBSD so im used to
 the linux kernel, that's why its confused me a little. FreeBSD is looking
 great tho.. :)
 
 But yeh wondering how I get rid of them 2 processes.

Those are not ordinary processes.  Rather they are kernel threads (or
some such description) -- along the same lines as the vmdaemon,
swapper or syncer threads.

In order to get rid of them, you'ld have to compile a custom kernel
with all of the usb support ripped out *and* you'ld have to take steps
to prevent the kernel autoloading a usb.ko kernel module on boot up.

If you have inadvertently loaded a usb kld module -- use kldstat(8) to
see if that is the case -- then you should be able to unload it with
kldunload(8), so long as it's not actually busy doing stuff.

On the whole though, I wouldn't bother too much about those usb kernel
thread things.  They're generally harmless and they don't have any
impact on the rest of the system if there are no USB peripherals in
use.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


HDD Sizes reported wrong?

2004-07-10 Thread Steven Adams
Hey,

 

I have a LSI MegaRaid Raid card with 5x 36gig raid 5 scsi drives..

 

This gives me 144gig of  useable space. 133 GIG if u do the 1024 bytes
calucation.

So really its 133gig of useable space all up.

 

Now my /home is getting reported at 108gig(which is right) But for some
reason its saying 97gig free and 2.4 gig used.. 

Im confussed where the other 8.5gig or so is gone??

 

First I thought it counted the bytes in 1000 not 1024.. But even saying that
I should have more space then I have..

 

/dev/amrd0s1a   2.9G50M   2.6G 2%/

devfs   1.0K   1.0K 0B   100%/dev

/dev/amrd0s1h   108G   2.4G97G 2%/home

/dev/amrd0s1g   871M34K   801M 0%/tmp

/dev/amrd0s1d   4.4G   1.2G   2.8G31%/usr

/dev/amrd0s1e   1.9G27M   1.8G 1%/var

/dev/amrd0s1f13G   2.1M12G 0%/var/log

 

Thanks

Steve

 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]